# Migration gaps — SAND-WP-0002 smoke findings

Recorded after SAND-WP-0002-T10 remote verification on CoulombCore (`92.205.130.254`).

**Host findings:** CoulombCore has `podman-compose` (not `docker compose`). Use
`SANDBOXER_COMPOSE_CMD=podman-compose`. Container images need fully qualified names
(e.g. `docker.io/library/nginx:alpine`) due to short-name registry policy.

## wise-validator (SAND-WP-0003)

| Legacy (`e2e-framework`) | sand-boxer today | Gap |
|--------------------------|------------------|-----|
| Parse `e2e/e2e.yml` health_checks | `wait_ready` uses compose `ps` only | wise-validator must own HTTP health polling |
| Run `test_command` | Not implemented | wise-validator runs tests inside ready sandbox |
| `reporter.py` → State Hub pass/fail | Lifecycle events only | wise-validator posts validation results |
| `make e2e REPO=` one-shot | `create` + separate validate step | Need orchestrated caller or validator CLI |

## the-custodian shim (SAND-WP-0004)

| Legacy | Target |
|--------|--------|
| `make e2e REPO=` in the-custodian | Delegate provision/teardown to `sandboxer create/destroy` |
| `python -m e2e_framework` | Deprecation notice + wrapper |
| `RUNBOOK.md` in e2e-framework | Point to `docs/runbooks/profile-compose-e2e.md` |

## sand-boxer follow-ons

| Item | Workplan |
|------|----------|
| Self-canary + host telemetry | SAND-WP-0008 |
| Default `sandboxer create` without repo | SAND-WP-0008-T06 |